
$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
File: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier: v0fuLL7NNaLSg6ZNv0ivtKLxvuO1WX+waJPWeLLhc/0=
Subject key identifier: 9F:5D:49:9B:C0:B7:9F:5F:37:AF:96:6E:B1:27:4B:CE:42:A5:E0:5E
Certificate issuer: /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial: 022ADC2B374F873CDE309AE1A4CC494FC7DF2C7E
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
Signing time: Sat 09 May 2026 02:47:09 +0000
ROA not before: Sat 09 May 2026 02:42:09 +0000
ROA not after: Sat 08 May 2027 02:47:09 +0000
asID: 267350
IP address blocks: 2804:4c1c:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2a:dc:2b:37:4f:87:3c:de:30:9a:e1:a4:cc:49:4f:c7:df:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Validity
Not Before: May 9 02:42:09 2026 GMT
Not After : May 8 02:47:09 2027 GMT
Subject: CN=9F5D499BC0B79F5F37AF966EB1274BCE42A5E05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:74:0c:5d:54:3e:ae:b9:3b:07:67:36:a8:
9d:93:44:b8:74:fa:d8:34:42:4b:c2:2b:04:82:ec:
6c:5a:a1:27:02:87:8a:28:75:a2:9c:80:c2:a1:1f:
77:2d:9e:02:11:91:22:e1:74:66:05:1d:37:fe:5a:
a4:c9:e8:21:60:5a:0e:f9:88:27:27:eb:d3:c8:cf:
06:e6:b0:97:72:e8:22:4d:b4:b4:17:fa:8f:15:4a:
da:86:00:70:ea:57:50:4f:f4:47:e6:fd:20:72:ed:
c3:5c:b2:1d:f5:73:a3:74:ab:c8:4d:50:88:e6:35:
67:38:29:71:9b:d4:8d:73:23:0c:51:92:56:38:a7:
3e:69:fd:0d:66:b8:53:c7:b8:b4:7b:36:b7:8c:02:
e7:0e:b2:c6:1d:5a:41:e0:69:04:96:95:80:e2:44:
d6:41:f4:7b:33:56:87:dd:2d:d1:84:e9:a0:f5:ac:
0f:0d:30:5c:c8:28:35:05:33:9b:d1:cc:4a:0e:4f:
7e:f7:2a:29:05:de:47:75:68:5c:33:4d:4e:ac:66:
44:1c:b0:7e:cd:ad:4f:f5:2e:6c:05:b0:b6:d9:66:
87:91:e8:74:e4:e2:d8:c4:f4:37:66:ef:5b:68:04:
16:56:f3:e3:d5:e5:c2:f5:53:f8:d7:1a:27:c7:18:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:49:9B:C0:B7:9F:5F:37:AF:96:6E:B1:27:4B:CE:42:A5:E0:5E
X509v3 Authority Key Identifier:
keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c1c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
3e:3c:21:a3:f7:89:06:6d:e7:d5:92:a8:47:f0:69:74:35:c1:
4b:20:a1:bc:ef:38:22:5d:15:bf:43:c4:d0:8b:27:7b:17:b9:
b2:95:73:e6:ce:bf:aa:6c:6e:13:6f:a7:32:c0:e6:e8:58:45:
4b:c7:25:b8:c7:68:97:21:ad:ae:e6:4a:c4:23:44:f4:74:2c:
ee:d4:24:84:ed:8f:52:9a:63:40:1e:df:46:18:30:44:90:65:
12:4a:6d:c2:f8:c1:92:c7:00:b1:10:4a:7b:05:e3:80:27:98:
85:e7:9d:62:91:7c:48:e9:8a:3a:be:cc:8a:b4:92:24:71:17:
b3:96:df:8a:66:4c:f6:f1:f7:21:be:e8:dc:2c:87:71:de:5a:
92:e4:25:48:df:09:39:ad:ac:a3:e5:fa:c6:50:7b:86:a8:1b:
00:f2:7e:55:4e:61:6a:99:f8:81:5d:cd:c6:e6:ca:6e:e4:c5:
e8:1e:17:75:59:18:d2:72:91:cf:d8:0d:88:88:0b:17:7f:92:
31:8f:1c:41:c5:76:10:50:2e:25:9c:16:7d:3f:ba:b0:66:77:
c3:a9:73:92:c1:2a:05:91:00:3c:9d:e7:ce:7d:cf:ce:60:c9:
04:ed:b4:10:b5:8a:3d:69:12:45:e7:b3:66:28:92:5a:81:fa:
03:2c:94:89
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAircKzdPhzzeMJrhpMxJT8ffLH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2
QjAzREE3RjAeFw0yNjA1MDkwMjQyMDlaFw0yNzA1MDgwMjQ3MDlaMDMxMTAvBgNV
BAMTKDlGNUQ0OTlCQzBCNzlGNUYzN0FGOTY2RUIxMjc0QkNFNDJBNUUwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsHQMXVQ+rrk7B2c2qJ2TRLh0
+tg0QkvCKwSC7GxaoScCh4oodaKcgMKhH3ctngIRkSLhdGYFHTf+WqTJ6CFgWg75
iCcn69PIzwbmsJdy6CJNtLQX+o8VStqGAHDqV1BP9Efm/SBy7cNcsh31c6N0q8hN
UIjmNWc4KXGb1I1zIwxRklY4pz5p/Q1muFPHuLR7NreMAucOssYdWkHgaQSWlYDi
RNZB9HszVofdLdGE6aD1rA8NMFzIKDUFM5vRzEoOT373KikF3kd1aFwzTU6sZkQc
sH7NrU/1LmwFsLbZZoeR6HTk4tjE9Ddm71toBBZW8+PV5cL1U/jXGifHGHOtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUn11Jm8C3n183r5ZusSdLzkKl4F4wHwYDVR0j
BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0
MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv
MzIzODMwMzQzYTM0NjMzMTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETBxAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+PCGj94kGbefVkqhH8Gl0NcFLIKG87zgiXRW/Q8TQiyd7F7mylXPmzr+q
bG4Tb6cywOboWEVLxyW4x2iXIa2u5krEI0T0dCzu1CSE7Y9SmmNAHt9GGDBEkGUS
Sm3C+MGSxwCxEEp7BeOAJ5iF551ikXxI6Yo6vsyKtJIkcRezlt+KZkz28fchvujc
LIdx3lqS5CVI3wk5rayj5frGUHuGqBsA8n5VTmFqmfiBXc3G5spu5MXoHhd1WRjS
cpHP2A2IiAsXf5IxjxxBxXYQUC4lnBZ9P7qwZnfDqXOSwSoFkQA8nefOfc/OYMkE
7bQQtYo9aRJF57NmKJJagfoDLJSJ
-----END CERTIFICATE-----
Generated at Wed May 13 19:46:06 2026 by rpki-client